$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3438203d3e20323134323939.roa File: 326130393a353463373a313030303a3a2f33362d3438203d3e20323134323939.roa (raw, json) Hash identifier: 08eCeOdeNp3t5H0I3j4L4iMY6CYKJWx0QxED9Jy2jXA= Subject key identifier: 2E:5F:E2:46:3F:A8:26:CA:37:FC:CF:7D:3E:0B:1E:FE:C1:44:D1:23 Certificate issuer: /CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Certificate serial: 46973072920F5230FB929DDB5420AFFB1CB621 Authority key identifier: CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3438203d3e20323134323939.roa Signing time: Tue 27 May 2025 07:37:09 +0000 ROA not before: Tue 27 May 2025 07:32:09 +0000 ROA not after: Tue 26 May 2026 07:37:09 +0000 asID: 214299 IP address blocks: 2a09:54c7:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Jun 2025 08:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:97:30:72:92:0f:52:30:fb:92:9d:db:54:20:af:fb:1c:b6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCD5D3BE49456F7D48B7321029C886F318C23B36 Validity Not Before: May 27 07:32:09 2025 GMT Not After : May 26 07:37:09 2026 GMT Subject: CN=2E5FE2463FA826CA37FCCF7D3E0B1EFEC144D123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:ba:b2:28:62:35:f5:73:c5:e7:f5:22:e7: 37:2a:55:fb:c8:2b:14:f6:c1:f9:d6:18:c7:72:02: c4:87:e3:ee:45:7f:bf:9c:42:10:12:8f:60:d8:38: ba:4a:ac:76:79:4d:ba:fe:4c:95:5f:19:f7:97:07: 29:fe:71:62:81:96:99:23:1b:4f:b9:f9:ad:ee:1c: 6f:1a:9b:88:b2:24:28:30:ea:b0:d1:39:ff:11:81: b4:a8:18:20:7a:ff:c7:80:b1:b3:04:f9:d2:83:b1: b3:03:a2:c6:ad:28:21:48:43:03:42:02:fa:e9:18: b5:41:23:28:a4:a8:38:4d:59:5a:0c:97:2c:50:98: b7:03:f6:38:e2:5f:25:a3:5b:87:3e:da:21:e9:26: 85:7f:37:42:10:24:3b:dc:2e:50:ef:f6:b8:74:a2: 8b:6b:f0:2a:a4:33:26:af:c2:6c:8b:06:8e:fa:2c: 4c:1d:cf:61:77:c4:e2:af:ef:cf:df:65:64:95:f8: 8c:aa:0a:48:7c:04:98:f9:ec:34:1b:df:fe:5c:58: 4c:1f:70:8b:89:9a:84:65:20:cb:02:2d:69:f8:49: 2e:5b:72:55:2b:21:db:75:c7:a4:2a:44:08:26:87: e6:86:51:f5:c4:64:d6:63:03:b4:c7:fe:45:bf:93: 77:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5F:E2:46:3F:A8:26:CA:37:FC:CF:7D:3E:0B:1E:FE:C1:44:D1:23 X509v3 Authority Key Identifier: keyid:CC:D5:D3:BE:49:45:6F:7D:48:B7:32:10:29:C8:86:F3:18:C2:3B:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/CCD5D3BE49456F7D48B7321029C886F318C23B36.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CCD5D3BE49456F7D48B7321029C886F318C23B36.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/326130393a353463373a313030303a3a2f33362d3438203d3e20323134323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:54c7:1000::/36 Signature Algorithm: sha256WithRSAEncryption 6b:fd:24:31:ab:4b:a2:58:d2:80:01:b5:82:ef:aa:0f:d9:d5: 28:fc:3c:c5:34:03:ac:64:e0:43:a5:f3:d5:a8:d4:77:32:09: ed:70:1e:43:e8:0a:41:8b:72:0d:74:f4:46:4f:bc:2e:cc:2d: a7:01:a1:8a:83:56:96:89:48:36:9c:cc:e0:bf:cb:18:c8:20: 5f:42:0a:5c:24:ec:61:8b:a6:88:99:f2:23:13:3a:e8:e5:33: 8b:e4:a6:21:c6:1b:14:f0:ef:bc:c6:b8:a5:7b:a1:ac:7b:2c: 92:a0:b4:d8:ed:08:b2:4f:10:35:b3:2d:48:a2:b8:45:2d:a5: f0:22:d5:57:7d:fe:87:cf:cb:66:39:8c:db:f9:ee:26:03:69: 87:d8:97:f6:a4:27:7c:1d:89:f4:c5:cc:e5:9b:09:4a:e9:be: e2:4a:de:9b:05:2c:ad:90:c6:71:5d:fa:ef:80:16:6a:b1:14: ca:a8:4c:15:a0:b3:0d:48:a4:b0:c0:27:0f:6f:70:64:e3:ad: 84:20:4c:8f:5c:ee:01:ba:81:5e:46:df:42:2e:b9:cf:79:dd: d2:48:ee:b0:58:45:02:e7:ff:2a:ec:f0:0f:73:e2:82:f4:60: 50:71:c7:42:04:2a:9c:3b:1e:27:9b:5e:2a:22:70:4d:37:b7: 7b:5b:7a:00 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgITRpcwcpIPUjD7kp3bVCCv+xy2ITANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAyOUM4ODZGMzE4 QzIzQjM2MB4XDTI1MDUyNzA3MzIwOVoXDTI2MDUyNjA3MzcwOVowMzExMC8GA1UE AxMoMkU1RkUyNDYzRkE4MjZDQTM3RkNDRjdEM0UwQjFFRkVDMTQ0RDEyMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOa8urIoYjX1c8Xn9SLnNypV+8gr FPbB+dYYx3ICxIfj7kV/v5xCEBKPYNg4ukqsdnlNuv5MlV8Z95cHKf5xYoGWmSMb T7n5re4cbxqbiLIkKDDqsNE5/xGBtKgYIHr/x4CxswT50oOxswOixq0oIUhDA0IC +ukYtUEjKKSoOE1ZWgyXLFCYtwP2OOJfJaNbhz7aIekmhX83QhAkO9wuUO/2uHSi i2vwKqQzJq/CbIsGjvosTB3PYXfE4q/vz99lZJX4jKoKSHwEmPnsNBvf/lxYTB9w i4mahGUgywItafhJLltyVSsh23XHpCpECCaH5oZR9cRk1mMDtMf+Rb+TdzMCAwEA AaOCAnkwggJ1MB0GA1UdDgQWBBQuX+JGP6gmyjf8z30+Cx7+wUTRIzAfBgNVHSME GDAWgBTM1dO+SUVvfUi3MhApyIbzGMI7NjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u ZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0zMjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5 NWQvMy9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAyOUM4ODZGMzE4QzIzQjM2LmNy bDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2kt cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVj OTFiZTNmOWQvMi9DQ0Q1RDNCRTQ5NDU2RjdENDhCNzMyMTAyOUM4ODZGMzE4QzIz QjM2LmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUFBzALhoGXcnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mNzk0ODczOC0z MjU1LTQ5ZjktOWI2Yy05YzlmMzg5ODk5NWQvMy8zMjYxMzAzOTNhMzUzNDYzMzcz YTMxMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMTM0MzIzOTM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEKglUxxAwDQYJKoZIhvcNAQELBQADggEBAGv9JDGrS6JY0oABtYLv qg/Z1Sj8PMU0A6xk4EOl89Wo1HcyCe1wHkPoCkGLcg109EZPvC7MLacBoYqDVpaJ SDaczOC/yxjIIF9CClwk7GGLpoiZ8iMTOujlM4vkpiHGGxTw77zGuKV7oax7LJKg tNjtCLJPEDWzLUiiuEUtpfAi1Vd9/ofPy2Y5jNv57iYDaYfYl/akJ3wdifTFzOWb CUrpvuJK3psFLK2QxnFd+u+AFmqxFMqoTBWgsw1IpLDAJw9vcGTjrYQgTI9c7gG6 gV5G30Iuuc953dJI7rBYRQLn/yrs8A9z4oL0YFBxx0IEKpw7HiebXioicE03t3tb egA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:54:34 2025 by rpki-client